CVE-2026-110532 Mail Mage <= 0.0.25 - Unauthenticated SQLi via 'ewp_unsubscribe' Parameter

The Mail Mage WordPress plugin through 0.0.25 does not properly sanitise and escape a user-supplied value before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection attacks...

CVE-2026-110532

The Mail Mage WordPress plugin, versions through 0.0.25 , is vulnerable to SQL injection . The flaw exists because the software fails to properly sanitize and escape user-supplied values before including them in a SQL statement. This security weakness allows unauthenticated attackers to perform S...